Oz Hair and Beauty data breach
1,988,331 accounts exposed.
Check whether your email is included on Have I Been Pwned.
What was exposed
Email addressesGeographic locationsNamesPhone numbersPurchases
What to do
- Expect more phishing emails that mention this service. Do not click links in them; go to the site directly.
- Be wary of texts and calls that seem to know your details.
- Turn on two-step verification wherever it is offered, and use a password manager.
About this breach
In August 2026, Australian beauty retailer Oz Hair and Beauty was the target of an xpl0itrs extortion attack. The group subsequently published data allegedly obtained from the company, which included 2M unique email addresses along with names, phone numbers, geographic locations (suburb and postcode) and purchases.